2-Way SSL in Apigee X: A Beginner's Guide to Mutual TLS (mTLS)
APIs power almost everything we use today—from mobile banking and online shopping to healthcare...
Jul 19, 20265 min read5 reactions0 comments
Back to articles Jul 19, 2026
Tag archive
#mtls
M
Jul 16, 2026Mutual TLS Explained: Making the Client Prove Its Identity Too
Run a tiny lab CA, sign a server cert and a client cert, then watch a -Verify server accept the client that presents a certificate and reject the one that doesn't — with a 'certificate required' TLS alert.
Jul 16, 20268 min read0 reactions0 comments
S
Jun 23, 2026Secure Authentication Model for Custom Gateway: Addressing Header Spoofing in MCP Server Platform
Introduction to the Authentication Model Design In the architecture of a Multi-Cloud...
Jun 23, 20267 min read0 reactions0 comments
Y
Jun 20, 2026Your Modern .p12 Is Broken on Windows: The PBES2/CNG Trap Nobody Documents
A PKCS#12 encrypted with AES-256, imported successfully by certutil, but ECDSA unusable in Edge. The CryptoAPI vs CNG routing trap and the MS KSP attribute fix.
Jun 20, 20264 min read0 reactions0 comments
M
Jun 16, 2026Multi-Audience mTLS: 3 SNI Hosts, 1 Listener, and Session Cert Binding Against Cookie Theft
A single TLS port serving three hosts via SNI with different ClientAuth levels. Plus the session cert binding pattern to block cookie replay attacks.
Jun 16, 20264 min read1 reactions0 comments
C
Jun 15, 2026CRL Double-Gate in mTLS: Revoking a Cert When the Client Is Already Connected
tls.Config.VerifyConnection only runs at handshake. A client on keep-alive after revocation keeps serving. Double-gate pattern and CRL hot-reload with monotonic check.
Jun 15, 20263 min read1 reactions0 comments
m
May 22, 2026mTLS Certificate Authentication for Microservices in Kubernetes
Microservices communicate over the network dozens or hundreds of times per second. Without mutual...
May 22, 20268 min read0 reactions0 comments
S
Apr 14, 2026Securing HTTP with mTLS: Managing SSL/TLS Certificates for Mutual Authentication
Introduction to SSL/TLS and mTLS Securing HTTP communication is no longer optional—it’s...
Apr 14, 202612 min read0 reactions0 comments
M
Apr 2, 2026Mongoose Library Flaws Expose Devices to RCE and mTLS Bypass: Update to Version 7.21+ to Mitigate Risks
Executive Summary The Mongoose network library, integral to the operation of millions of...
Apr 2, 20266 min read0 reactions0 comments
I
Mar 30, 2026Implementing PKI, CA, and mTLS in Homelab: Integrating TinyAuth with Istio and Remote Pangolin
Introduction to PKI, CA, and mTLS Securing a homelab environment requires a deep...
Mar 30, 202615 min read0 reactions0 comments
W
May 2, 2026War Story: How a Faulty Istio 1.23 mTLS Config Broke Cross-Region Traffic for 2M Users in 2026
War Story: How a Faulty Istio 1.23 mTLS Config Broke Cross-Region Traffic for 2M Users in...
May 2, 20263 min read0 reactions0 comments
D
Apr 28, 2026Deep Dive: Istio 1.22 mTLS Implementation and Cilium 1.16 eBPF Integration for Kubernetes 1.32
In 2024, 72% of Kubernetes outages traced to misconfigured service meshes or networking layers, but...
Apr 28, 202615 min read0 reactions0 comments